Privacy Policy
Effective Date: July 11th, 2023
Waymark, Inc. (collectively “Company,” “we,” or “us”) recognizes that when you share your information with us, you are trusting us to be responsible with your information. We are committed to protecting the privacy and security of information that you share with us.
This Privacy Policy applies when you visit www.waymarkcare.com (our “Website”). We explain in this Privacy Policy what data we collect via this Website, how we use and disclose that information, how long we keep your data, and how you can exercise your rights regarding data you share with us. This Privacy Policy does not apply to information collected by any third party, including information collected via third party links on our Website.
The use of this website is not intended for EU audiences and is not made accessible to countries in the EU.
Information we collect
When you use this Website, we may collect the following categories of personal data about you:
- Demographic and contact information, such as your name, email address, phone number, and other information you may choose to provide if you apply for a role at our Company, or contact us with a question.
- Device information, such as internet protocol “IP” addresses, unique device identifiers, and the type of web browser, from the device and software you use to access the Website.
- Location information, which may be inferred by the location of the device you use to access this Website. For example, your IP address may indicate where you are generally located (e.g., city or by zip code).
We may also collect your personal data through the following tracking technology:
- Cookies: Cookies are small files that are transferred to your device’s hard drive for a period of time to store your preferences and other types of information to help us provide you with certain features. A session cookie goes away after you close your browser. A persistent cookie stays after you close your browser and may be used when you visit our Website again. Most web browsers automatically accept cookies, but you can usually change your settings to prevent this. If you disable cookies, your ability to use some features of our Website may be limited.
Why we collect your personal data and how we use it
When you use this Website, we will collect your personal data and may use it:
- To respond to your communications with us,
- To maintain and improve the Website user experience, and
- To comply with applicable laws and legal obligations.
How we share information that we collect
To provide this Website and respond to information you may share with us, we may share your personal data with the Waymark people / human resources team as well as with other employees if you apply for a role to join our team. In addition, we may share your personal information with vendors that we hire to help us administer and provide services to you. These third parties are required to treat your personal information in accordance with appropriate contractual and legal privacy and security requirements.
We use service providers and other business partners to help us process your personal data. Your personal data will be shared with the vendors that host our Website and that assists us in improving or tracking our Website’s performance. We have contracts with our service providers to ensure they provide an adequate level of protection for your personal data. These entities are authorized to use your personal data only as necessary to provide these services to us.
Waymark does not sell your personal information. We only share your information as described in this policy.
How long we keep your personal data
Your personal data will only be kept for as long as we reasonably consider necessary for achieving the purposes set out above, or for as long as we are legally required to keep it.
Do not track
Certain laws require Waymark to indicate whether we honor “Do Not Track” settings in your browser concerning targeted advertising. As of the effective date of this Privacy Policy, an industry standard has not yet been established on how to respond to these signals, and therefore Waymark does not currently respond to such signals. Instead, we adhere to the standards set out in this Privacy Policy. If you have any questions, please contact us using the information provided below.
Minors
Online components of our services are not directed to children under the age of 13, and we do not knowingly collect personal information via online services from children under the age of 13.
Your rights
Depending on your relationship with us, certain rights may apply with respect to your personal data. Please contact us using the information below to exercise your rights.
Updates to this Privacy Policy
From time to time, we may clarify, revise, or update this Privacy Policy. This may include making changes to the way we collect, maintain, and store information. If we make any changes to this Privacy Policy, we will revise the date at the top of the Privacy Policy. Changes to this Privacy Notice will become effective once they are posted.
Your continued use of this Website after we make changes means that you have accepted those changes.
Contact Us
If you have questions or concerns about this Privacy Policy, our information practices, or about the privacy and security of your personal data, please contact us using the information below.
Waymark, Inc.
Attn: Legal – Privacy2021 Fillmore Street, #1059
San Francisco, CA 94115
privacy@waymarkcare.com
Notice of Privacy Practices
This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
Waymark Care is committed to protecting the confidentiality of its patients’ medical information. This Notice of Privacy Practices (“Notice”) describes how we may use and disclose your medical information and your rights concerning your medical information. This Notice is provided to you pursuant to the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”).
Our Responsibilities
We are required to (i) maintain the privacy of your medical information as required by law; (ii) provide you with this Notice stating our legal duties and privacy practices with respect to your medical information; (iii) abide by the terms of this Notice; and (iv) notify you following a breach of your medical information that is not secured in accordance with certain security standards.
We reserve the right to change the terms of this Notice and to make the provisions of the new Notice effective for all medical information that we maintain. If we change the terms of this Notice, the revised Notice will be made available upon request and posted online. Copies of the current Notice may be obtained by contacting our Privacy Officer.
Uses and Disclosures Without Your Authorization
The following categories describe different ways that we use and disclose medical information. For each category of uses or disclosures, we will explain what we mean and try to give an example. Not every use or disclosure in a category is listed. However, all of the ways we are permitted to use and disclose medical information fall within one of the categories.
Treatment: We may use and disclose your medical information to provide, coordinate and/or manage your treatment, health care, or other related services. For example, we may disclose medical information about you to your primary care doctor or another provider who is involved in your care. We may also use your medical information to remind you about an upcoming appointment.
Payment: We may use and disclose your medical information as needed to bill or obtain payment for the treatment and services provided. For example, we may contact your health plan to determine whether it will authorize payment for our services or to determine the amount of your co-payment or co-insurance.
Healthcare Operations: We may use or disclose your medical information in order to carry out our general business activities or certain business activities. These activities include, but are not limited to, training and education; quality assessment/improvement activities; risk management; claims management; legal consultation; licensing; and other business planning activities. For example, we may use your medical information to evaluate the quality of care we are providing.
Family and Friends: We may disclose your medical information to a family member or friend who is involved in your medical care or to someone who helps pay for your care. We may also use or disclose your medical information to notify (or assist in notifying) a family member, legally authorized representative or other person responsible for your care of your location, general condition or death. If you are a minor, we may release your medical information to your parents or legal guardians when we are permitted or required to do so under federal and applicable state law.
Third Parties: We may disclose your medical information to third parties with whom we contract to perform services on our behalf. If we disclose your information to these entities, we will have an agreement with them to safeguard your information. Examples of these third parties include, but are not limited to, accreditation agencies, management consultants, quality assurance reviewers, collection agencies, transcription services, etc.
Required by Law: We may use or disclose your medical information to the extent the use or disclosure is required by law. Any such use or disclosure will be made in compliance with the law and will be limited to what is required by the law.
Public Health Activities: We may disclose your medical information for public health activities. These activities generally include the following:
- To prevent or control disease, injury or disability
- To report child abuse or neglect
- To report reactions to medications or problems with products
- To notify people of recalls of products they may be using
- To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition
- To notify the appropriate government authority if we believe you have been the victim of abuse, neglect or domestic violence. We will only make this disclosure if you agree or when otherwise required by law to make the disclosure.
Health Oversight Activities: We may disclose your medical information to a health oversight agency for activities authorized by law. These oversight activities include, for example, audits; investigations, proceedings or actions; inspections; and disciplinary actions; or other activities necessary for appropriate oversight of the health care system, government programs and compliance with applicable laws.
Law Enforcement: We may disclose your medical information to law enforcement in very limited circumstances, such as to identify or locate suspects, fugitives, witnesses or victims of a crime, to report deaths from a crime, and to report crimes that occur on our premises.
Judicial and Administrative Proceedings: We may disclose information about you in response to an order of a court or administrative tribunal as expressly authorized by such order.
To Avert a Serious Threat to Health or Safety: We may use or disclose your medical information when necessary to prevent a serious and imminent threat to your health or safety or the health and safety of the public or another person. Any disclosure would only be to someone able to help prevent the threat of harm.
Disaster Relief Efforts: We may use or disclose your medical information to an authorized public or private entity to assist in disaster relief efforts. You may have the opportunity to object unless it would impede our ability to respond to emergency circumstances.
Coroners, Medical Examiners and Funeral Directors: We may disclose medical information consistent with applicable law to coroners, medical examiners and funeral directors only to the extent necessary to assist them in carrying out their duties.
Organ and Tissue Donation: We may disclose medical information consistent with applicable law to organizations that handle organ, eye or tissue donation or transplantation, only to the extent necessary to help facilitate organ or tissue donation or transplantation.
Research: Under certain circumstances, we may also use and disclose information about you for research purposes. All research projects are subject to a special approval process through an appropriate committee.
Workers’ Compensation: We may disclose your medical information as authorized by law to comply with workers’ compensation laws and other similar programs established by law.
Military, Veterans, National Security and Other Government Purposes: If you are a member of the armed forces, we may release your medical information as required by military command authorities or to the Department of Veterans Affairs. We may also disclose your medical information to authorized federal officials for intelligence and national security purposes to the extent authorized by law.
Correctional Institutions: If you are or become an inmate of a correctional institution or are in the custody of a law enforcement official, we may disclose to the institution or law enforcement official information necessary for the provision of health services to you, your health and safety, the health and safety of other individuals and law enforcement on the premises of the institution and the administration and maintenance of the safety, security and good order of the institution.
Other Uses and Disclosures Require Your Authorization
If we wish to use or disclose your medical information for a purpose not set forth in this Notice, we will seek your authorization. Specific examples of uses and disclosures of medical information requiring your authorization include: (i) most uses and disclosures of your medical information for marketing purposes; (ii) disclosures of your medical information that constitute the sale of your medical information; and (iii) most uses and disclosures of psychotherapy notes (private notes of a mental health professional kept separately from a medical record). You may revoke an authorization in writing at any time, except to the extent that we have already taken action in reliance on your authorization.
Your Medical Information Rights
Inspect and/or obtain a copy of your medical information. You have the right to inspect and/or obtain a copy of your medical information maintained in a designated record set. If we maintain your medical information electronically, you may obtain an electronic copy of the information or ask us to send it to a person or organization that you identify. To request to inspect and/or obtain a copy of your medical information, you must submit a written request to our Privacy Officer. If you request a copy (paper or electronic) of your medical information, we may charge you a reasonable, cost-based fee.
Request a restriction on certain uses and disclosures of your medical information. You have the right to ask us not to use or disclose any part of your medical information for purposes of treatment, payment or healthcare operations. While we will consider your request, we are only required to agree to restrict a disclosure to your health plan for purposes of payment or healthcare operations (but not for treatment) if the information applies solely to a healthcare item or service for which we have been paid out of pocket in full. If we agree to a restriction, we will not use or disclose your medical information in violation of that restriction unless it is needed to provide emergency treatment. We will not agree to restrictions on medical information uses or disclosures that are legally required or necessary to administer our business. To request a restriction, you must submit a written request to our Privacy Officer.
Request confidential communications. You have the right to request that we communicate with you in a certain way or at a certain location. For example, you can ask that we only contact you at work or by mail. To request a confidential communication of your medical information, you must submit a written request to our Privacy Officer stating how or when you would like to be contacted. We will not require you to provide an explanation for your request. We will accommodate all reasonable requests.
Request an amendment to your medical information. If you believe that any information in your medical record is incorrect or if you believe important information is missing, you may request that we amend the existing information. To request such an amendment, you must submit a written request to our Privacy Officer.
Request an accounting of certain disclosures. You have the right to receive an accounting of certain disclosures we have made of your medical information. To request an accounting, you must submit a written request to our Privacy Officer. The first accounting you request within a 12-month period will be provided free of charge. We may charge you for any additional requests in that same 12-month period.
Obtain a paper copy of this Notice. You have the right to obtain a paper copy of this Notice upon request, even if you agreed to accept this Notice electronically. To obtain a paper copy of this Notice, contact our Privacy Officer.
State Law
We will not use or share your information if state law prohibits it. Some states have laws that are stricter than the federal privacy regulations, such as laws protecting HIV/AIDS information or mental health information. If a state law applies to us and is stricter or places limits on the ways we can use or share your health information, we will follow the state law. If you would like to know more about any applicable state laws, please ask our Privacy Officer.
Questions, Concerns, or Complaints
If you have any questions or want more information about this Notice or how to exercise your medical information rights, you may contact our Privacy Officer by mail at: Attn: Privacy Officer, 2021 Fillmore Street, Suite 1059, San Francisco, CA 94115.
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Office for Civil Rights: Centralized Case Management Operations, U.S. Department of Health and Human Services, 200 Independence Avenue, S.W., Room 509F HHH Bldg., Washington, D.C. 20201 or OCRComplaint@hhs.gov. We will not retaliate against you for filing a complaint.
