PRIVACY POLICY

Welcome to the website (the “Site”) of Energy Wellness LLC (“Onsite,” “we,” “us,” or “our”). Energy Wellness provides onsite healthcare services for employers via sophisticated mobile practices and fully self-contained pop-up healthcare practices (collectively, including the Site, the “Service”).

This Privacy Policy explains what Personal Information (defined below) we collect, how we use and share that information and your choices concerning our information practices. This Privacy Policy is incorporated into and forms part of our Terms of Use.

Before using the Service or submitting any Personal Information to Onsite, please review this Privacy Policy carefully and contact us if you have any questions. By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access the Site or otherwise use the Service.

PERSONAL INFORMATION WE COLLECT

We collect information that alone or in combination with other information in our possession could be used to identify you (“Personal Information”) as follows:

Personal Information You Provide:
We collect the following categories of Personal Information from you when you create and register an account through the Onsite portal, book an appointment through the Site, and contact Onsite via email and provide any voluntary information:

  • Identification Information: We collect your name, email address, phone number, mailing/billing addresses, and birthdate.
  • Communication Information: We may collect information when you contact us with questions or concerns and when you voluntarily respond to questionnaires, surveys or requests for market research seeking your opinion and feedback.  Providing communication information is optional to you.
  • Social Media Information: We have pages on social media sites like Instagram, Facebook, and LinkedIn (“Social Media Pages”). When you interact with our Social Media Pages, we will collect Personal Information that you elect to provide to us, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.

Protected Health Information: Some of the Personal Information processed by Energy Wellness in connection with providing the Service to you may be subject to laws and regulations, such as rules issued under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH), that govern providers’ use and disclosure of certain individually identifiable health-related Personal Information (“Protected Health Information”). When Energy Wellness receives Protected Health Information, it does so as a “business associate” of certain health care providers under an agreement that, among other things, prohibits us from using or disclosing the Protected Health Information in ways that are not permissible by the health care provider itself, and requires us to implement certain measures to safeguard the confidentiality, integrity, and availability of the Protected Health Information. When we act as a business associate, we may be subject to certain laws and regulations, including certain HIPAA rules, that govern our use and disclosure of Protected Health Information and that may be more restrictive than otherwise provided in this Privacy Policy.

HOW WE MAY USE AND DISCLOSE YOUR PERSONAL INFORMATION

For purposes of this Notice, PHI means information we create or maintain in verbal, paper, or electronic format that identifies you and relates to your past, present or future physical or mental health or condition and the provision of health care services to you.

Below we describe different ways that we use and disclose your PHI. Although we provide some specific examples, not every specific use or disclosure is listed in this Notice.

I. Uses and Disclosures of PHI That Do Not Require Your Prior Authorization
We may use and disclose your PHI for purposes of treatment, payment and healthcare operations without your prior authorization:

Treatment. We may use and disclose your PHI to provide and coordinate the treatment, medications and services you receive. For example, we may use your PHI to diagnose your health condition and to provide you with health care services. We may disclose your PHI to pharmacists, doctors, nurses, technicians and other provider personnel involved in your health care. We may also disclose your PHI to hospitals, pharmacies and other health care facilities and other third parties to facilitate the provision of health care services, medications, equipment and supplies you may need. This helps to coordinate your care and make sure everyone who is involved in your care has the necessary information to meet your health care needs.

Health Care Operations. We may use and disclose your PHI for our health care operations, which are activities necessary for us to operate our business. For example, we may use your PHI to monitor the performance of the health care providers and staff providing treatment to you. We may use your PHI as part of our efforts to improve the quality and effectiveness of our services. We may disclose your PHI to other entities that have provided services to you so they can perform their own operations, such as to improve the quality and effectiveness of their health care services.

We may also use and disclose your PHI without your prior authorization for the following purposes:

Business Associates. We may disclose your PHI to certain third parties that perform services for us, such as management, billing, legal, accounting, or consulting services. If these service providers need to access your PHI to perform services for us, they are required by contract and may be required by law to protect your PHI and only use and disclose your PHI as permitted by the contract they have with us or as required by law.

Employers. If you receive occupational health-related services, we maintain PHI on behalf of your employer. That PHI is part of your employment record and is owned by your employer. In other cases, we may disclose your PHI to your employer if it concerns a work-related illness or injury, or workplace medical surveillance.

Where the provision of healthcare comes as result of employer sponsorship, such as pre-employment physicals, work-readiness determination, occupational health, biometric / wellness and/or similar assessments, we may disclose PHI, including record of your participation, to the employer-sponsor or their designee. If you do not want us to make such disclosures, you have the right to refuse. However, refusal may preclude you from the assessment itself, or related participation-dependent employer incentives.

Worker’s Compensation. We may disclose your PHI as authorized by laws relating to worker’s compensation or other similar programs.

As Required by Law. We may disclose your PHI when required to do so by federal, state or local law.

Public Health. We may disclose your PHI to public health or other government authorities in connection with certain public health activities and purposes, such as preventing or controlling disease, injury, or disability.

Food and Drug Administration (“FDA”). We may disclose PHI related to adverse events with FDA-regulated products (drugs, devices, foods, and supplements) or to enable product recalls, repairs, or replacement.

Health Oversight. We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, licensure or disciplinary actions.

Judicial and Administrative Proceedings. We may disclose your PHI in the course of a judicial or administrative proceeding in certain circumstances. For example, we may disclose your PHI in response to a court order. We may also disclose your PHI in response to subpoena, discovery request, or other lawful process but only if efforts were made, either by the requesting party or us, to first tell you about the request or to obtain an order protecting the information requested.

Law Enforcement. We may disclose your PHI to a law enforcement official in certain situations. For example, we may disclose your PHI to law enforcement as required by law, in response to a court order or subpoena issued by a judicial officer, or to assist law enforcement in locating missing persons.

Disaster Relief. We may use and disclose your PHI to certain entities for purposes of disaster relief efforts. For example, we may share your PHI with the American Red Cross or another similar federal, state, or local disaster relief agency or authority, to help the agency locate persons affected by a disaster.

Correctional Institution. If you are or become an inmate of a correctional institution, we may disclose PHI to the institution, or its agents, as necessary for your health and the health and safety of other individuals.

Coroners, Medical Examiners and Funeral Directors. We may release your PHI to coroners or medical examiners so that they can carry out their duties, such as identifying a deceased person or determining the cause of death. We may also disclose PHI to funeral directors consistent with applicable law to enable them to carry out their duties.

Organ or Tissue Procurement Organizations. Consistent with applicable law, we may disclose your PHI to organ procurement organizations or other entities engaged in the procurement, banking, or transplantation of organs for tissue donation and transplant.

Research.
 We may use and disclose your PHI for research purposes but only if certain conditions are met, such as a formal review board has determined and documented that such use or disclosure of PHI involves no more than a minimal risk to your privacy.

Fundraising.
 While the Facilities do not currently engage in fundraising, if we decide to use or disclose your PHI to communicate with you about fundraising efforts, we will allow you to opt-out of such communications by contacting the Privacy Officer.

To Avert a Serious Threat to Health or Safety.
 As consistent with applicable law and standards of ethical conduct, we may use and disclose your PHI if we believe in good faith that the use or disclosure is necessary to prevent a serious threat to your health or safety or the health or safety of the public or another person.

Specialized Government Functions. If you are a member of the armed forces, we may release PHI about you as required by military command authorities. We may also release PHI (i) about foreign military personnel to the appropriate foreign military authority; and (ii) to federal officials for intelligence, counterintelligence, protection of the President, and other national security activities authorized by law.

Victims of Abuse or Neglect. We may disclose PHI about you to a government authority if we reasonably believe you are a victim of abuse or neglect. We will only disclose this type of information to the extent required or permitted by law, or if you agree to the disclosure.

II. Uses and Disclosures of PHI that Require Your Prior Authorization.

If we wish to use or disclose your PHI for a purpose not described in this Notice, we will obtain your written authorization. You may revoke your authorization in writing at any time by contacting the Privacy Officer, unless we already disclosed your PHI based on your authorization.

Your Health Information Rights:

Obtain a paper copy of the Notice upon request. You may request a paper copy of our current Notice at any time. Even if you have agreed to receive the Notice electronically, you are still entitled to a paper copy. You may obtain a paper copy at the Facility where you receive care or by contacting the Privacy Officer.

Request to inspect and obtain a copy of PHI. You may access and obtain a copy of the PHI we maintain about you by sending a written request. If we maintain your PHI electronically, you can ask for a copy of the PHI in an electronic format. You may also ask us to send a copy of your PHI to other individuals or entities that you designate in writing. We may charge you a reasonable, cost-based fee for providing you copies of your records. In some cases, we maintain PHI on behalf of your employer. That PHI is part of the employment record owned by the employer, so we may direct you to your employer to access that PHI.

Request an amendment of PHI.
 If you feel that any PHI we maintain about you is incomplete or incorrect, you may ask that we amend it. To request an amendment, you must send a written request (including a reason that supports your request).

Request a restriction on certain uses and disclosures of PHI. You may request additional restrictions on our use or disclosure of your PHI by sending a written request to the Privacy Officer. We are not required to agree to a restriction, except if the disclosure is from a Facility subject to HIPAA to a health plan, the disclosure is not required by law, and the PHI pertains solely to a health care item or service for which you, or a person acting on your behalf, has paid in full out of pocket without a claim being submitted to the health plan.

Request an accounting of disclosures of PHI. You may ask for a list of certain types of disclosures of your PHI by submitting a written request to the Privacy Officer. Your request must specify a time period. If you request such a list more than once a year, we may charge a fee.
Request communications of PHI by alternative means or at alternative locations. You may request that we communicate with you in a certain way or at a certain location. For instance, you may ask us to contact you at a different residence or post office box, or via e- mail or other electronic means. Please note, if you choose to receive communications from us through e-mail or other electronic means, those communications may not be secure, and your PHI could be intercepted and read by unauthorized third parties. To request confidential communication of your PHI, you must submit a request in writing to the Privacy Officer. Your request must tell us how or where you would like to be contacted. We will accommodate all reasonable requests.

Notification of a Breach. We will notify you of a breach of your PHI in accordance with applicable law.

For More Information or to Report a Problem
If you have any questions or would like additional information about our privacy practices, you contact us at our designated request address: [email protected].

CHANGES TO THE PRIVACY POLICY

The Service and our business may change from time to time. As a result, we may change this Privacy Policy at any time. When we do, we will post an updated version on this page, unless another type of notice is required by the applicable law. By continuing to use our Service or providing us with Personal Information after we have posted an updated Privacy Policy, or notified you by other means if applicable, you consent to the revised Privacy Policy and practices described in it.

CONTACT

If you have any questions about our Privacy Policy or information practices, please feel free to contact us at our designated request address: [email protected].

Last Updated May 18th, 2021