Health Information Privacy Policy
This Health Information Privacy Policy ("HIPAA Policy") is an appendix to our main Privacy Policy and applies specifically to the collection, use, and disclosure of your Protected Health Information (PHI) by Astric LLC ("Astric") and our wellness platform, Ric. This policy outlines your rights and our responsibilities under the Health Insurance Portability and Accountability Act (HIPAA).
Last Updated: May 22, 2024
Collection and Use of PHI
Astric may collect PHI from you with your explicit consent for the following purposes:
-
Market Research: Astric's Product Innovation, Creative Engagement, and Strategic Analytics teams may access anonymized and de-identified PHI to conduct market research and improve our products and services. This data is strictly controlled within Astric and will not be used to identify you individually.
-
Product/Service Provision: Ric may use your PHI to provide you with personalized wellness services, such as alerts, reminders, tips, insights, and tracking features. This includes using your health data to enhance your user experience on our platform.
Anonymization and De-identification
We take the protection of your PHI seriously. Whenever possible, we will anonymize or de-identify your PHI before using it for any purpose. This means removing any information that could be used to identify you individually.
Disclaimer
Astric's products and services are not intended to provide medical advice. Please consult with a qualified healthcare professional for any health concerns or before making any decisions related to your health or treatment.
Safeguards
Astric has implemented robust administrative, technical, and physical safeguards to protect your PHI from unauthorized access, use, and disclosure. These safeguards include:
-
Encryption of PHI in transit and at rest.
-
Access controls to limit who can view and access PHI.
-
Regular security assessments and audits.
-
Training for Astric contractors and employees on the importance of PHI protection.
Your Rights
You have the right to:
-
Request access to your PHI.
-
Request correction of your PHI.
-
Request restriction of the use or disclosure of your PHI.
-
Request an accounting of disclosures of your PHI.
-
File a complaint with Astric or the Department of Health and Human Services if you believe your privacy rights have been violated.
To exercise any of these rights, please contact us at compliance@astric.co.
Opt-Out and Deletion
You may opt out of the collection and use of your PHI for market research purposes at any time by contacting us at compliance@astric.co. You may also request the deletion of your PHI, subject to legal limitations.
Changes to this Policy
We may update this HIPAA Policy from time to time. We will notify you of any changes by posting the new policy on our website and updating the "Last updated" date at the top of this policy. You are advised to review this policy periodically for any changes.
