Notice of Privacy Practices

Effective [pending: effective date]Version 1.0 (npp-1.0)

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

Who this notice is from

[pending: the Practice’s legal name] (the “Practice”), [pending: the Practice’s address]. “We” in this notice means the Practice and its physician, [pending: the physician’s name], a [pending: license type]. It applies to the medical information the Practice holds about you: what you told your physician, your photo and report as your physician reviewed them, your DNA results, your physician’s notes, decisions and prescriptions, and your messages with your physician.

Oona (Lumenos AI Inc.) runs the website, your account, billing and shipping for the Practice, and processes your medical information for the Practice [pending: the Oona–Practice services agreement]. Oona’s own Privacy Policy covers the information Oona holds for itself.

Our duties

We keep your medical information private. We give you this notice of our duties and practices, follow the notice that is in force, and tell you if a breach of your unsecured medical information affects you, as the law requires. We may change this notice; the new version applies to all information we hold, and you can always find the current one in your account and on withoona.com.

How we use and disclose your medical information

For your treatment. Your physician uses your information to decide whether to treat you, what to prescribe, and how to adjust your care. Your physician sends your prescription to the pharmacy that compounds and ships your medication, and your DNA sample goes to the laboratory that analyzes it, with what each needs for its work. Your DNA results go to the supplement manufacturer only as the formula it is to make, without your results themselves.

For payment. You pay Oona for your program; the Practice bills no one. The Practice does not bill insurance and shares nothing with any insurer. The information that goes to the payment processor is your name, contact details, plan and amounts, never your medical information.

To run the Practice. Reviewing the quality of care, keeping records, training and supervision, and meeting legal and professional duties. Oona supports these as the Practice’s service company and may see your medical information for that purpose only.

To contact you. By email, through your account’s messages and, if you gave a phone number, by text or call, about your care, your results and your prescriptions.

As the law requires or allows. When a law, a court order or a public-health authority requires it; to report abuse or a serious threat to someone’s safety; to the Florida Department of Health or a licensing board in an investigation; to a medical examiner; or as otherwise permitted by Florida law.

Other uses and disclosures. Any use or disclosure of your medical information not described in this notice is made only with your written authorization. You can withdraw an authorization at any time in writing; the withdrawal does not undo disclosures already made.

Your rights

To exercise a right, write to the Practice at the address below, or email [pending: the Practice’s contact].

Complaints

If you believe your privacy rights have been violated, you may complain to the Practice at the address below, to the Florida Department of Health (flhealthsource.gov, 850-488-0595) [pending: confirmation], and, if HIPAA applies, to the U.S. Department of Health and Human Services, Office for Civil Rights (hhs.gov/ocr). We will not retaliate against you for complaining.

Contact

[pending: the Practice’s legal name] · [pending: address] · [pending: email and phone]