1. Scope
This Consumer Health Data Privacy Notice supplements the Healed Website Privacy Notice. It applies when a state consumer-health privacy law covers information processed by Sigma Health, Inc., doing business as Healed (“Healed,” “we,” “us,” or “our”). It does not replace the OpenLoop Notice of Privacy Practices governing protected health information maintained for the treating professional.
2. Consumer health data we may collect
- Information showing interest in, access to, or use of a health, telehealth, weight-management, laboratory, pharmacy, medication, or related service.
- Program, membership, support, subscription, transaction, refund, payment-status, shipment-status, and related service information received from you or OpenLoop.
- Information you submit to Healed support or another Healed-controlled collection point that relates to health, treatment, medication, or care.
- Public-site device and interaction information—such as page and referring URLs, page title, IP address, browser or device characteristics, approximate location, cookie or browser identifiers, advertising click identifiers, timestamps, and generic events—when it is reasonably linkable to a consumer and relates to health services.
- Inferences derived from the information above where applicable law treats them as consumer health data.
3. Sources
We may collect consumer health data directly from you; automatically from your device or use of healed.care; from OpenLoop and the OpenLoop-operated patient platform; and from service providers acting for Sigma or OpenLoop. Clinical intake and medical-record information are collected in the OpenLoop-operated environment and are governed by the applicable OpenLoop documents and HIPAA obligations.
4. Why we collect and use it
- Provide, coordinate, support, administer, and improve the services you request.
- Manage membership, billing assistance, cancellations, refunds, shipping support, and communications.
- Route clinical, privacy, and patient-rights requests to OpenLoop or the appropriate professional entity.
- Secure the service, prevent fraud, troubleshoot, keep records, and comply with legal obligations.
- Measure public-site engagement and advertising performance only as described below and with any consent or choice required by law.
- Create aggregate or de-identified information in accordance with applicable law.
5. Who may receive it
Depending on the service and information involved, consumer health data may be disclosed to OpenLoop Health, Inc.; the professional entity and licensed treating professional identified in the patient platform; laboratories, pharmacies, fulfillment providers, payment and patient-support providers coordinated through OpenLoop; Sigma’s hosting, security, communications, analytics, professional-adviser, and other service providers; regulators or other recipients required by law; and a successor in a permitted corporate transaction.
On Healed-controlled public webpages, Stape, Google, Meta, TikTok, and Microsoft may receive limited device, advertising-attribution, and generic interaction information through the technologies listed in the Healed Website Privacy Notice. These tools are not permitted in OpenLoop intake, checkout, payment, patient-portal, or clinical areas, and Sigma does not send them intake answers, clinical information, medication selections, completed-care outcomes, patient identifiers, or enhanced-conversion contact information.
6. Advertising, sale, and geofencing
We do not sell protected health information. We do not use geofencing to identify, track, or target a person seeking or receiving healthcare services. Some state laws may define disclosures of public-site device or interaction information to advertising providers as a sale, sharing, or targeted advertising even when no money is exchanged. Where required, we obtain consent or provide an opt-out through the cookie-preference tool. Withdrawing advertising consent does not affect eligibility for or access to care.
7. Your rights
Subject to applicable law and exceptions, you may request confirmation of whether we collect or share your consumer health data; access to or deletion of that data; withdrawal of consent; and a list of third parties or affiliates with which it was shared. You may also appeal a denied request. We will not unlawfully discriminate against you for exercising a right.
Email support@store.healed.care or write to the address below. We may take reasonable steps to verify your identity and authority. If your request concerns a medical record or protected health information maintained for a treating professional, we will route it to OpenLoop or the appropriate healthcare provider.
8. Retention, security, and changes
We retain consumer health data only for as long as reasonably necessary for the purposes described above, to meet legal and contractual obligations, resolve disputes, and protect the service. We use administrative, technical, and physical safeguards designed to protect the information, but no system can guarantee absolute security.
We may update this notice by posting a revised version and effective date and giving additional notice or requesting consent where required.
9. Contact
Sigma Health, Inc., doing business as Healed
1 Ferry Building, Suite 201
San Francisco, CA 94111
Privacy requests and appeals: support@store.healed.care or the mailing address above.