Privacy Policy 

​

Effective as of: January 1, 2024
Last Updated: December 12.2024

​

Introduction

At Koru Wellness, respecting and protecting your privacy in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable laws is a priority. This policy outlines our practices concerning the handling of your personal and health-related information through our website, https://koruwell.com, and other services we offer.

​

Definitions

Protected Health Information (PHI) refers to any information about your health status, provision of health care, or payment for health care that can be linked to an individual. This includes any part of your medical record or payment history.

​

Information We Collect

Voluntarily Provided Information: Includes PHI actively provided by you when using our services, such as medical history, current health condition, and insurance details.

Automatically Collected Information: Includes data sent by your devices when accessing our services, such as IP addresses, device types, and location data, which may indirectly become linked to your personal identity when combined with PHI.

​

Use and Disclosure of PHI

We adhere to the principle of "minimum necessary use" for any PHI. This means that only the essential information needed to perform a task is accessed or disclosed. Your PHI may be used or shared in the following ways:

• To provide and manage our services.

• For billing and payment processing.

• To improve service quality through feedback and research.

We require all business associates and third-party service providers to comply with HIPAA standards and ensure they have signed confidentiality agreements that restrict their use of PHI to the purposes for which they are engaged.

​

Individual Rights

Under HIPAA, you have the right to:

• Access and obtain a copy of your PHI.

• Request amendments to incorrect or incomplete PHI.

• Receive an accounting of disclosures of your PHI.

• Request restrictions on certain uses and disclosures of your PHI.

To exercise any of these rights, please contact us at the details provided at the end of this policy.

​

Security Measures

We implement stringent administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of electronic PHI. We are committed to regularly reviewing and updating our security practices to prevent unauthorized access or disclosure of your information.

​

Data Breach Notification

In the unlikely event of a data breach affecting your PHI, we will notify you in accordance with HIPAA requirements and take steps to mitigate any potential harm.

​

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. Contact details for lodging a complaint with us are provided below, and we will not retaliate against you for filing a complaint.

​

Changes to This Policy

We may update this privacy policy to reflect changes to our information practices. If we make any material changes, we will notify you by email (if available) or by means of a notice on our website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

​

Contact Us

For any questions about this policy or our privacy practices, or to manage your PHI, please contact us at:

Email: admin@koruwell.com
Address: 3031 Maple Loop Dirve, Suite G100, Lehi Utah 84043

​

Acknowledgement

By using our services, you acknowledge that you have read and understood this privacy policy and agree to its terms.