HIPAA Notice

About This Notice

This page explains how the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") applies to your use of the Service operated by Heir Health LLC ("Heir Health").

Heir Health Is Not a HIPAA Covered Entity

Heir Health provides the technology platform you use to access telehealth services. Heir Health is not a "covered entity" under HIPAA. Information you provide to Heir Health for purposes of creating and maintaining your account — such as your name, email address, shipping address, and phone number — is not "protected health information" under HIPAA.

However, in connection with the medical services you receive through the Service, you may share information that is protected under HIPAA or under applicable state privacy laws. That information is governed by your Medical Group's Notice of Privacy Practices, not this page.

Your Medical Group's Notice of Privacy Practices

The Medical Groups and Providers who deliver medical services through the Service are separate from Heir Health. They have adopted their own Notice of Privacy Practices ("Notice of Privacy Practices" or "NPP") that describes how they collect, use, and disclose your protected health information.

You receive the Medical Group's Notice of Privacy Practices when you create your patient account and complete your first medical consultation through the Service. By accessing or using any part of the Service, you acknowledge receipt of the Notice of Privacy Practices from your Medical Group and Provider(s).

If you have questions about the Medical Group's Notice of Privacy Practices, or you need a copy, please contact your Medical Group through the patient portal or contact us at support@heirhealth.co and we will help you obtain one.

Heir Health as a Business Associate

In some cases, Heir Health may act as a "business associate" of a Medical Group or Pharmacy under HIPAA. In that role, Heir Health may receive, store, or transmit protected health information on behalf of the Medical Group or Pharmacy. When Heir Health acts as a business associate, it uses and discloses that information only in accordance with the applicable Business Associate Agreement and HIPAA.

What Is Protected Information

For purposes of this notice and the Heir Health Privacy Policy, "Protected Information" includes:

• "Protected health information" as defined by HIPAA, when applicable
• Health or medical information that is subject to specific protections under applicable state laws

Protected Information does not include information that has been de-identified in accordance with HIPAA or applicable state laws.

State Privacy Laws

In addition to HIPAA, several states have laws that protect consumer health data outside of HIPAA. These laws may give you additional rights — including rights to access, correct, delete, and withdraw consent for the use of your consumer health data. For information about how Heir Health handles consumer health data under these state laws, please see our Consumer Health Data Privacy Policy.

How to Reach Us

If you have any questions about this HIPAA Notice or about how Heir Health handles your information:

Email: privacy@heirhealth.co

Mail:

Heir Health LLC

Attn: Privacy Officer

1300 S Highland Ave

Clearwater, FL 33756

If you have questions specifically about the medical care you receive or about the Medical Group's privacy practices, please contact your Medical Group through the patient portal.

Note: This page explains how HIPAA applies to Heir Health's role as a technology platform. It is not the same as your Medical Group's Notice of Privacy Practices, which is a separate document delivered to you at the start of your patient relationship with the Medical Group.