HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Our Commitment to Your Privacy

Jelly Health is committed to protecting your health information. We are required by law to maintain the privacy and security of your protected health information (PHI) and to provide you with this notice of our legal duties and privacy practices.

How We May Use and Disclose Your Health Information

Your Rights Regarding Your Health Information

• Right to inspect and copy your health information
• Right to request amendments to your health information
• Right to receive an accounting of disclosures
• Right to request restrictions on uses and disclosures
• Right to request confidential communications
• Right to receive a paper copy of this notice

Data Security Measures

We implement appropriate technical and organizational security measures to protect your PHI, including:

• Encryption of data in transit and at rest using industry-standard protocols
• Multi-factor authentication for provider access
• Comprehensive audit logging of all PHI access
• Regular security assessments and updates
• Strict access controls and role-based permissions
• Automatic session timeouts for inactive users

Breach Notification

In the event of a breach of your unsecured PHI, we will notify you as required by law. We maintain incident response procedures and will take immediate action to mitigate any breach.

Changes to This Notice

We reserve the right to revise this notice. Any revision will be effective for all PHI we already have as well as any PHI we receive in the future. We will post the current notice on our website with the effective date.

Contact Information

If you have questions about this notice or wish to file a complaint about our privacy practices, please contact our Privacy Officer at privacy@jellyhealth.com or call us at (845) 546-1455.