HIPPA Privacy Policy
HIPAA Privacy Notice
Notice of Privacy Practices for Protected Health Information (PHI)
Effective Date: April 29, 2026
This Notice of Privacy Practices ("Notice") describes how Whoosh Holding Co LLC ("we," "us," or "our") may use and disclose your Protected Health Information (PHI) to carry out treatment, payment, or healthcare operations and for other purposes permitted or required by law. This Notice also describes your rights regarding your PHI.
We are required by law to:
- Maintain the privacy of your PHI
- Provide you with this Notice of our legal duties and privacy practices
- Abide by the terms of this Notice
Uses and Disclosures of PHI
We may use and disclose your PHI for the following purposes:
a. Treatment — We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services, including communication with other healthcare providers about your treatment.
b. Payment — We may use and disclose your PHI to obtain payment for healthcare services, including contacting your insurance company to verify coverage, billing and collection activities, and sharing PHI with other healthcare providers, insurance companies, or collection agencies.
c. Healthcare Operations — We may use and disclose your PHI for quality assessment, improvement activities, case management, accreditation, licensing, credentialing, and medical reviews, audits, or legal services.
d. As Required by Law — We may use and disclose your PHI when required to do so by federal, state, or local law.
e. Public Health and Safety — We may use and disclose your PHI to prevent or control disease, injury, or disability; to report child abuse or neglect; to report reactions to medications or products; and to notify persons who may have been exposed to a communicable disease.
f. Health Oversight Activities — We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.
g. Judicial and Administrative Proceedings — We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.
h. Law Enforcement — We may disclose your PHI for law enforcement purposes, such as to report certain types of wounds or injuries, or to comply with a court order, warrant, or other legal process.
i. Research — We may use and disclose your PHI for research purposes when the research has been approved by an institutional review board and privacy protections are in place.
j. Organ and Tissue Donation — If you are an organ donor, we may disclose your PHI to organizations that handle organ procurement, transplantation, or donation.
k. Workers' Compensation — We may disclose your PHI for workers' compensation or similar programs that provide benefits for work-related injuries or illnesses.
l. Military and Veterans — If you are a member of the armed forces, we may disclose your PHI as required by military authorities.
m. Inmates — If you are an inmate, we may disclose your PHI to the correctional institution or law enforcement official having custody of you.
Your Rights Regarding PHI
a. Right to Inspect and Copy — You have the right to inspect and copy your PHI that we maintain, with certain exceptions. To request access, submit a written request to our Privacy Officer. We may charge a reasonable fee for copying, mailing, or other associated costs.
b. Right to Amend — You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. We may deny your request if we believe the information is accurate and complete, or if we did not create the information.
c. Right to an Accounting of Disclosures — You have the right to request an accounting of disclosures of your PHI made by us in the past six years, except for disclosures made for treatment, payment, or healthcare operations, and certain other disclosures.
d. Right to Request Restrictions — You have the right to request a restriction on our use or disclosure of your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request but will consider it.
e. Right to Request Confidential Communications — You have the right to request that we communicate with you about your PHI in a certain way or at a certain location.
f. Right to a Paper Copy of This Notice — You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically.
g. Right to be Notified of a Breach — You have the right to be notified in the event that we discover a breach of your PHI.
Transmission of PHI
We are committed to protecting the privacy of your PHI and will ensure that any electronic transmission of PHI complies with the HIPAA Privacy Rule (45 CFR 164). This includes the use of Secure-Socket Layer (SSL) or equivalent technology, as well as adherence to all applicable security standards for online transmissions.
Changes to This Notice
We reserve the right to change this Notice. Revised notices will be effective for PHI we already have about you, as well as any information we receive in the future. We will post a copy of the current Notice in our office and on our website.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the Department of Health and Human Services. You will not be retaliated against for filing a complaint.
Contact Information
Whoosh Holding Co LLC779 Newton Way, Costa Mesa, CA 92627[email protected]
State-Specific Rights
California Residents
California residents have the following additional rights:
- Right to Access — Request PHI in a readily usable electronic format as required by California law.
- Right to Restrict Certain Disclosures — Request restrictions on disclosures to health plans for services paid out-of-pocket in full.
- Confidentiality of Medical Information Act (CMIA) — California residents are protected by the CMIA, which provides additional privacy protections for medical information.
- Marketing and Sale of PHI — California residents have the right to request that their PHI not be used for marketing purposes or sold to third parties without their authorization.
- Minor's Rights — Minors (under 18) may request that certain sensitive information (reproductive health, mental health, substance use disorder treatment) not be disclosed to a parent or guardian without consent.
New York Residents
We comply with the New York State Confidentiality of Information Law, which provides additional protections for HIV-related information, mental health records, and genetic testing results. Written consent is required before disclosing such information, even for treatment, payment, or healthcare operations.
Texas Residents
We comply with the Texas Medical Privacy Act, which includes consent requirements for certain PHI disclosures, additional safeguards for electronic PHI, and specific requirements for the destruction of PHI. We also adhere to Texas's privacy protections for mental health records and substance use treatment records.
Florida Residents
We comply with Florida's privacy laws protecting mental health records, HIV/AIDS-related information, and substance abuse treatment records. Written consent is required before disclosure. We also implement specific security measures for electronic PHI as required by Florida law.
Illinois Residents
We comply with Illinois's privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results. Written consent is required before disclosure. We will notify patients of any unauthorized access to their electronic PHI as required by Illinois law.
Massachusetts Residents
We comply with Massachusetts's privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results. Written consent is required before disclosure. We also implement specific security measures for electronic PHI as required by Massachusetts law.