1. Scope
This Consumer Health Data Privacy Notice supplements the Healed™ Website Privacy Notice. It applies to residents of states with applicable consumer health data privacy laws when information is processed by Sigma Health, Inc., doing business as Healed (“Sigma,” “Healed™,” “we,” “us,” or “our”). It does not replace the OpenLoop Notice of Privacy Practices governing protected health information maintained for the treating professional under the Health Insurance Portability and Accountability Act (“HIPAA”).
2. Consumer health data we may collect
We may collect and use the following, which may be considered consumer health data under applicable law:
- Information indicating your inquiry about, access to, or use of a health, telehealth, weight-management, laboratory, pharmacy, medication, or related service, including any data identifying you as a consumer seeking or obtaining such services.
- Program, membership, support, subscription, transaction, refund, payment-status, shipment-status, and related service information received from you or OpenLoop.
- Information you submit to Healed™ support or another Healed™-controlled collection point that relates to health, treatment, medication, or care.
- Public-site device and interaction information—such as page and referring URLs, page title, IP address, browser or device characteristics, approximate location, cookie or browser identifiers, advertising click identifiers, timestamps, and generic events—when it is reasonably linkable to a consumer and relates to health services.
- Inferences derived from the information above where applicable law treats them as consumer health data.
3. Sources
We may collect consumer health data from the following sources: (a) directly from you when you interact with healed.care or submit information through our website or customer support channels; (b) automatically from your device or browser when you visit healed.care; (c) from OpenLoop Health, Inc. (“OpenLoop”) and the OpenLoop-operated patient platform in connection with coordinating services; and (d) from service providers acting on behalf of Sigma or OpenLoop. Clinical intake, medical record information, and protected health information are collected in the OpenLoop-operated environment and are governed by the OpenLoop Notice of Privacy Practices and HIPAA.
4. Purposes for collection and use of your data
We collect and use consumer health data for the following purposes:
- Provide, coordinate, support, administer, and improve the services you request.
- Manage membership, billing assistance, cancellations, refunds, shipping support, and communications.
- Route clinical, privacy, and patient rights requests to OpenLoop or the appropriate professional entity.
- Secure the service, prevent fraud, troubleshoot, keep records, and comply with legal obligations.
- Measure public-site engagement and advertising performance only as described in this notice and with any consent required by applicable law.
- Create aggregate or de-identified information in accordance with applicable law.
5. Who may receive your data
Depending on the service and information involved, consumer health data may be disclosed to OpenLoop; the professional entity and licensed treating professional identified in the OpenLoop-operated patient platform; laboratories, pharmacies, fulfillment providers, payment and patient-support providers coordinated through OpenLoop; Sigma’s hosting, security, communications, analytics, professional-adviser, and other service providers; regulators or other recipients required by law; and a successor in a permitted corporate transaction.
On Healed™-controlled public webpages, Stape, Google, and Meta may receive limited device, advertising-attribution, and interaction information—including which plan you clicked on the public site and its list price—through the technologies listed in the Healed™ Website Privacy Notice. These tools are not permitted in OpenLoop intake, checkout, payment, patient portal, or clinical areas, and Sigma does not send them intake answers, clinical information, prescriptions or medication decisions made in the patient platform, completed care outcomes, patient identifiers, or enhanced-conversion contact information.
6. Advertising, sale, sharing, and geofencing
We do not sell consumer health data for monetary consideration. Some state laws may define disclosures of public-site device or interaction information to advertising providers as a “sale” or “sharing” even when no money is exchanged. For a detailed description of the cookies and similar technologies used on healed.care, please see the Healed™ Website Privacy Notice. Where required by applicable law, we obtain your consent before deploying non-essential cookies or similar tracking technologies. You can change or withdraw your cookie consent at any time by clicking “Privacy choices” in the website footer.
Withdrawing advertising consent does not affect your eligibility for or access to care.
We do not use geofencing technology to establish a virtual perimeter around any physical location that provides in-person healthcare services (such as a hospital, clinic, doctor’s office, pharmacy, or mental health facility) for the purpose of identifying, tracking, collecting data from, or sending notifications or advertisements to consumers who are seeking or receiving healthcare services at such locations.
7. Your rights
Subject to applicable law and exceptions, you may have the rights to: (a) request confirmation of whether we collect or share your consumer health data; (b) request access to the specific consumer health data we have collected; (c) request deletion of your consumer health data; (d) withdraw any consent you previously provided; (e) request a list of the names and/or categories of third parties and specific affiliates to which we have disclosed your consumer health data; and (f) appeal a denied request. We will respond within the timeframe required by applicable law. We will not unlawfully discriminate against you for exercising a right.
To exercise these rights, email support@store.healed.care or write to the address below. We may take reasonable steps to verify your identity and authority. If your request concerns a medical record or protected health information maintained for a treating professional, we will route it to OpenLoop or the appropriate healthcare provider.
8. Retention, security, and changes
We retain consumer health data only for as long as reasonably necessary for the purposes described above, to meet legal and contractual obligations, resolve disputes, and protect the service. We use administrative, technical, and physical safeguards designed to protect the information, but no system can guarantee absolute security.
We may update this notice by posting a revised version and effective date and giving additional notice or requesting consent where required by applicable law.
9. Contact
Sigma Health, Inc., doing business as Healed
1 Ferry Building, Suite 201
San Francisco, CA 94111
Privacy requests and appeals: support@store.healed.care or the mailing address above.
