Effective as of the latest revision
Get Well Fast Care. ("Get Well Fast Care," "we," "us," "our") is committed to protecting your
personal and health information with the highest standards. This Privacy Policy explains how we
collect, use, disclose, store, and safeguard your data when you use our platform and services in the
United States.
1. Data Collection
1.1 Identity: Full name, DOB, address, email,
phone, SSN (when required for insurance/regulatory compliance).
1.2 PHI: Medical history, medications, allergies,
vitals, labs, imaging, ICD-10 codes, treatment plans, clinical notes, prescriptions, immunizations
per HIPAA.
1.3 Financial: Insurance details (carrier, member
ID, group), tokenized card data, ACH info, HSA/FSA data, billing history.
1.4 Technical: IP, browser, OS, device, screen,
GPS/IP geolocation, page views, session data, clickstream, referral source, search queries.
1.5 Communications: Chat transcripts, video
recordings (with consent), voicemails, email content, SMS logs.
1.6 Tracking:
Essential/functional/analytics/advertising cookies, pixel tags, fingerprinting for fraud prevention
only.
2. Data Usage
2.1 Clinical: Scheduling, assessments, diagnosis,
treatment, prescriptions, referrals, care coordination, chronic disease monitoring.
2.2 Coordination: Sharing with treating providers,
specialists, pharmacies (Surescripts), labs, imaging centers, rehab, home health.
2.3 Insurance: Eligibility verification, prior
auth, claims submission, remittance, denials/appeals, COB, HEDIS/Stars reporting.
2.4 Communication: Confirmations, reminders,
telehealth links, results, prescriptions, summaries, billing, security alerts.
2.5 Marketing: With opt-in: health tips, campaigns,
offers, referrals, events. Unsubscribe anytime; transactional messages continue.
2.6 Improvement: UX optimization, feature
development, A/B testing, search improvement, ML model training for clinical decision support.
3. Data Sharing
3.1 Treatment: PHI to actively treating licensed
providers in our network.
3.2 Payers: For claims, utilization review, auth,
quality assessment, risk adjustment, regulatory reporting.
3.3 Business Associates: HIPAA-compliant BAs under
executed agreements: cloud (AWS+BAA), EHR, payments (Stripe PCI L1), analytics, IT security, legal,
auditors.
3.4 Legal: Pursuant to HIPAA, state laws, court
orders, subpoenas, law enforcement, public health reporting, abuse/neglect reporting.
3.5 Safety: Serious health/safety threats, fraud
prevention, authorized law enforcement identification.
4. Security
4.1 Encryption: TLS 1.3 (transit), AES-256-GCM
(rest), TDE (databases), encrypted backups with separate key management.
4.2 Access: Zero-trust, RBAC, mandatory MFA
(TOTP+biometric), JIT provisioning, PAM, quarterly access certification.
4.3 Infrastructure: SOC 2 Type II + HITRUST,
multi-AZ, 99.99% SLA, WAF, DDoS mitigation, IDS/IPS, 24/7 SOC with SIEM.
4.4 Compliance: Privacy + Security Officers, annual
risk assessments, quarterly pen testing, monthly vuln scanning, workforce training, phishing sims,
1-hour breach notification.
4.5 SDLC: SAST, DAST, SCA, container scanning,
secure code review, dependency monitoring for all deployments.
5. Your Rights
5.1 Access: Request PHI copies within 30 days.
First electronic copy free.
5.2 Amendment: Request corrections; denied requests
include written explanation and appeal rights.
5.3 Accounting: Request log of certain disclosures
in past six years.
5.4 Restrictions: Request limits; must comply when
self-pay + requested plan restriction.
5.5 Confidential: Request alternative
channels/locations for communications.
5.6 Paper Notice: Free printed copy on request.
5.7 State Rights: Additional rights under
CCPA/CPRA, CDVA, MHWDA, TDPSA, and other state laws.
5.8 Complaints: File with HHS OCR at hhs.gov/ocr
without retaliation.
6. Retention & Contact
6.1: Medical records per federal/state minimums.
Account data 3 years post-inactivity. Suppression lists 5 years.
6.2: Material changes notified 30 days prior.
Continued use = acceptance.
6.3: Privacy Officer — privacy@getwellfastcare.com | 4942 Oakmont Dr, Corpus Christi, TX 78413, USA.
