HIPAA Compliance Notice: HealthLensPlus is committed to protecting your health information. This platform is designed to comply with the Health Insurance Portability and Accountability Act (HIPAA) and maintains appropriate administrative, physical, and technical safeguards.
1. Introduction
HealthLensPlus ("we," "our," or "us") respects your privacy and is committed to protecting your personal health information (PHI) and personally identifiable information (PII). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, professional credentials, practice information
- Patient Data: Lab results, symptoms, medical history (de-identified or with appropriate consent)
- Usage Data: How you interact with our platform, features used, time spent
- Communication Data: Support requests, feedback, correspondence
2.2 Automatically Collected Information
- IP addresses and browser information
- Device information and identifiers
- Cookies and similar tracking technologies
- Log files and usage analytics
3. HIPAA Compliance
As a healthcare technology platform, we:
- Execute Business Associate Agreements (BAAs) with covered entities as required
- Implement administrative, physical, and technical safeguards required by HIPAA
- Conduct regular security risk assessments
- Maintain audit logs of all PHI access and modifications
- Provide breach notification as required by law
- Limit PHI use and disclosure to the minimum necessary
4. How We Use Your Information
We use collected information to:
- Provide functional medicine interpretation and treatment recommendations
- Improve and optimize our platform's accuracy and features
- Communicate with you about your account and services
- Ensure platform security and prevent fraud
- Comply with legal obligations and regulatory requirements
- Conduct anonymized research to improve healthcare outcomes
5. Information Sharing and Disclosure
We do not sell, rent, or trade your personal or health information. We may share information only:
- With Your Consent: When you explicitly authorize sharing
- For Treatment: To facilitate patient care coordination (with authorization)
- Service Providers: With vendors who assist in platform operation under strict confidentiality agreements
- Legal Requirements: When required by law, subpoena, or court order
- Public Health: For authorized public health activities as permitted by HIPAA
- De-identified Data: Aggregated, anonymized data for research or analytics
6. Data Security
We implement industry-standard security measures including:
- 256-bit SSL/TLS encryption for data in transit
- AES-256 encryption for data at rest
- Multi-factor authentication options
- Regular security audits and penetration testing
- Access controls and role-based permissions
- Secure data centers with 24/7 monitoring
- Regular backups and disaster recovery procedures
7. Data Retention
We retain personal and health information for as long as necessary to:
- Provide our services to you
- Comply with legal and regulatory requirements
- Resolve disputes and enforce agreements
- Maintain records as required by HIPAA (minimum 6 years)
8. Your Rights
Under HIPAA and applicable privacy laws, you have the right to:
- Access: Request copies of your health information
- Amendment: Request corrections to your health information
- Accounting: Receive an accounting of disclosures
- Restriction: Request restrictions on uses and disclosures
- Confidential Communication: Request communications by alternative means
- Data Portability: Receive your data in a structured format
- Deletion: Request deletion (subject to legal requirements)
9. Cookies and Tracking
We use cookies and similar technologies to:
- Maintain your session and authentication
- Remember your preferences and settings
- Analyze platform usage and performance
- Provide personalized features
You can control cookies through your browser settings, though some features may not function properly without them.
10. Children's Privacy
HealthLensPlus is intended for use by healthcare professionals and is not directed to children under 18. We do not knowingly collect information from children under 18.
11. International Data Transfers
Your information may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international transfers in compliance with applicable laws.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of any material changes via email or platform notification. Your continued use constitutes acceptance of the updated policy.
13. Contact Information
For privacy-related questions or to exercise your rights, contact us at:
HealthLensPlus Privacy Officer
La Bonne Vie Family Healthcare & Aesthetics
Email: privacy@healthlensplus.com
Phone: 1-800-HEALTH-LENS
14. Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.
← Back to Home